Lucene search
+L

3 matches found

OSV
OSV
•added 2019/09/23 6:32 p.m.•21 views

GHSA-6M4R-CGM3-6Q7Q Cross-Site Scripting in status-board

All versions of status-board are vulnerable to Cross-Site Scripting. The renderJsDashboard function concatenates the safeDashboard variable to the HTTP response message with insufficient sanitization. If this variable is controlled by user input it may allow attackers to execute arbitrary...

6.1CVSS6.4AI score0.0084EPSS
SaveExploits0References5
nodejs
nodejs
•added 2019/09/05 9:47 p.m.•36 views

Cross-Site Scripting

Overview All versions of status-board are vulnerable to Cross-Site Scripting. The renderJsDashboard function concatenates the safeDashboard variable to the HTTP response message with insufficient sanitization. If this variable is controlled by user input it may allow attackers to execute arbitrar...

4.3CVSS3AI score0.0084EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/26 12:00 a.m.•4 views

PT-2019-14207

Name of the Vulnerable Software and Affected Versions Status Board version 1.1.81 status-board versions all Description The issue is related to Cross-Site Scripting. The renderJsDashboard function is vulnerable due to insufficient sanitization of the safeDashboard variable. If this variable is...

6.1CVSS0.0084EPSS
SaveExploits0References7
Rows per page
Query Builder